Privacy Policy
Last updated: September 11, 2026
Publisher: Arcustin Yapay Zeka Teknolojileri Anonim Şirketi
This Privacy Policy explains how Arcustin Yapay Zeka Teknolojileri Anonim Şirketi ("Arcustin", "we", "us" or "our") processes personal data when you use the Arcustin iOS mobile game that displays or links to this Privacy Policy (the "Game"), including its iOS application, anonymous player profile, leaderboard, in-app purchases, advertising, push notifications and customer support (collectively, the "Services"). It applies to the Game and not automatically to other Arcustin products or third-party services.
The Game is a general-audience casual puzzle game. It is not offered in Apple's Kids Category. Its App Store age rating describes content suitability and does not mean that the game is specifically directed to children.
Privacy at a Glance
No user-facing account: the Game does not ask you to create a password or provide your Apple Account name or email address. Firebase and Supabase create anonymous technical identifiers.
Privacy-protective advertising: the Game currently uses Google AdMob for non-personalized rewarded and interstitial ads. It does not use Apple's IDFA or cross-app tracking for advertising.
Limited public profile: other players may see only the nickname you choose, one of nine pre-designed in-game avatars, your score and leaderboard ranking.
No sale of personal data: Arcustin does not sell personal data or share it for cross-context behavioral advertising.
Backend location and retention: the Supabase project is hosted in a Europe region, and backend user data for the Game is generally retained for no longer than three years, subject to the exceptions below.
Your rights: you may request access, correction or deletion by contacting info@arcustin.com.
1. Data Controller and Contact Details
For the processing described in this Privacy Policy, the data controller is Arcustin Yapay Zeka Teknolojileri Anonim Şirketi. Our contact details are:
Arcustin Yapay Zeka Teknolojileri Anonim Şirketi
Ayazağa Mahallesi, Kemerburgaz Caddesi, Vadi İstanbul Park Sitesi, 7A Blok No: 7B, İç Kapı No: 4, 34396 Sarıyer/İstanbul, Türkiye
Email: info@arcustin.com
2. Personal Data We Collect
2.1 Information you choose to provide
Profile information: the nickname you choose and one of nine Arcustin-provided in-game avatars. You do not need to use your real name.
Reports and support: the content of a nickname report, support request, privacy request or other message you send us, together with your email address if you contact us by email.
Feedback: ideas, survey responses or comments you voluntarily provide, if a feedback feature is offered.
2.2 Anonymous identifiers and profile records
When you use the Game without signing in, Firebase Authentication and Supabase Auth may create pseudonymous or app-scoped records. These may include a Firebase user identifier, Supabase user identifier, internal player identifier, Firebase Installation identifier, Identifier for Vendor (IDFV) and similar identifiers needed to distinguish an installation or guest player profile.
If you choose Sign in with Apple or Sign in with Google, the account connection is managed through Supabase Auth. Depending on the provider and the information made available through the configured authentication permissions, we may process:
the selected identity provider;
a provider-specific unique user identifier;
an email address and email-verification status;
authentication, authorization and session information; and
limited basic profile information made available by the provider.
For Sign in with Apple, the email address may be your actual email address or an Apple-generated private relay address if you choose Hide My Email. Apple may provide name information only during the initial authorization and only if that information is requested and made available.
For Sign in with Google, the basic profile information made available through the configured profile permission may include your display name, profile-image URL and locale. We use this information only where received and necessary for authentication and account administration.
We do not receive your Apple or Google password, payment credentials, contacts, private messages, files, Google Drive content or other content from your third-party account. Account information received through sign-in is not displayed on the public leaderboard and is not used for advertising or marketing. Your public profile continues to use only your chosen nickname and Arcustin-provided avatar.
2.3 Gameplay, economy and leaderboard data
level starts, completions, failures, attempts, moves, session duration and gameplay progress;
scores, achievements, leaderboard rank, nickname and selected avatar;
coin and booster balances, rewards, inventory, offer views and item use;
season-pass, bundle, fail-offer and other purchase or entitlement status; and
game configuration, remote-config assignment, A/B test assignment and feature interactions.
2.4 Device, network, analytics and diagnostic data
We and our service providers may automatically process IP address, approximate country or region derived from IP, device model, operating-system version, app version, language, time zone, connection and request timestamps, installation information, performance measurements, crash reports, error logs, security events and analytics events. We do not request precise GPS location, contacts, photos, camera, microphone or health data for the Game.
2.5 Purchase data
When you make an in-app purchase, Apple processes the payment. Arcustin may receive the product identifier, transaction identifier, receipt or validation data, purchase date, storefront or region, price tier, refund or revocation status, and delivery status needed to fulfill and support the purchase. Arcustin does not receive your full payment-card number, bank-account credentials or Apple Account password.
2.6 Advertising and consent data
For rewarded and interstitial ads, Google AdMob may process ad requests, impressions, clicks, completion and reward events, coarse contextual information, IP address, app/device information, consent signals and identifiers used for fraud prevention, frequency control or aggregated reporting. The Game is currently configured not to serve personalized ads and not to access Apple's Identifier for Advertisers (IDFA). We do not use data to track you across apps or websites owned by other companies.
Non-personalized advertising is based on context rather than your past behavior, but Google explains that it may still use limited identifiers or storage for functions such as frequency capping, fraud prevention and aggregated ad reporting. The Game uses Google's User Messaging Platform (UMP) to present and record privacy choices where required. The app may also display Apple's App Tracking Transparency prompt; under the current configuration of the Game, Arcustin does not access IDFA even if permission is granted.
2.7 Push-notification data
If you allow notifications, Apple Push Notification service and Firebase Cloud Messaging may process an app/device push token, notification preferences, delivery status and interaction data, such as whether a notification was opened. We use this information to send game-related reminders, events, rewards, service notices or other notifications permitted by your settings and applicable law.
2.8 iCloud Key-Value Store data
iCloud Key-Value Store is separate from Sign in with Apple. Arcustin does not receive your Apple Account name or email address through iCloud Key-Value Store. If you separately choose Sign in with Apple, the limited authentication information described in Section 2.2 may be received through that sign-in process.
3. How We Collect Data
We collect personal data:
directly from you when you choose a nickname, submit a report, initiate account deletion or contact support;
automatically from the app and device when you install, launch or use the Game;
from Apple or Google when you choose to use the relevant sign-in method and the provider sends us an authentication response;
from Apple when it confirms an App Store transaction, refund, revocation, notification delivery or iCloud operation; and
from our service providers, including Google Firebase, Google AdMob and Supabase, when they provide the technical services described in this policy.
4. Why We Use Data and Our Legal Bases
4.1 To provide and administer the Game
We use identifiers, authentication data, gameplay data, profile and leaderboard information, balances, purchase data, notification information and iCloud-related data to create and manage guest or linked player profiles, authenticate signed-in players, link guest progress to the selected account, locate the correct player record, make eligible progress available on compatible devices, deliver Virtual Items, restore eligible purchases, process account deletion, provide support and enforce the Terms of Use. Where applicable, the legal basis is performance of our contract with you or steps taken at your request before entering into that contract.
4.2 To improve, test and personalize the in-game experience
We use analytics, gameplay events, Remote Config and A/B Testing to understand performance, balance levels and rewards, diagnose problems, measure feature use, optimize offers, develop new content and improve the player experience. Where permitted, we rely on our legitimate interests in operating and improving a safe, effective game. Where consent is required for a particular technology or jurisdiction, we rely on consent and respect your choice.
4.3 To provide non-personalized advertising
We use AdMob data to request, display and measure non-personalized rewarded and interstitial ads, grant advertised rewards, control frequency and prevent fraud. Depending on your location and the specific storage or processing involved, we rely on consent, performance of the service you request, or legitimate interests, as permitted by law. We do not rely on acceptance of this Privacy Policy as consent where separate consent is legally required.
4.4 To communicate with you
We use support messages and notification data to respond to requests and, if you enable notifications, to send permitted game-related notices. We rely on your request, performance of our contract, legitimate interests in supporting the Services, or consent where required. You can disable push notifications at any time in iOS Settings.
4.5 Security, moderation and legal compliance
We use identifiers, logs, purchase records, reports and gameplay data to prevent cheating, fraud, abuse, security incidents and unlawful conduct; investigate reports; protect players and Arcustin; establish or defend legal claims; comply with lawful requests; and meet tax, accounting, consumer and data-protection obligations. The legal bases are our legitimate interests, compliance with legal obligations, performance of the Terms and the establishment, exercise or defense of legal rights, as applicable.
5. Public Leaderboard and Nickname Moderation
Your chosen nickname, selected in-game avatar, score and ranking may be visible to other players. Do not use a real name or include personal or sensitive information in a nickname. The Game applies a profanity/content filter and provides a reporting feature. We may review reports and reject, reset, hide or remove a nickname or leaderboard entry that violates the Terms of Use, threatens player safety or infringes rights.
6. Advertising Choices and Tracking
The Game currently uses only Google AdMob and does not currently enable third-party mediation networks. Ads are rewarded and interstitial; no banner ads are currently used. The Game is configured for non-personalized advertising and does not access IDFA or conduct cross-app tracking.
You can control advertising and related privacy settings as follows:
Use the UMP privacy-options control presented in the Game where required to review or change available consent choices.
Manage Apple's tracking permission under iOS Settings > Privacy & Security > Tracking. Under the current configuration, the Game does not access IDFA even if tracking permission is granted.
You may decline an optional rewarded ad and continue using the game without receiving the advertised reward. Interstitial advertising may still appear unless removed by an applicable purchased feature.
If Arcustin later activates AppLovin, Unity Ads or another advertising or mediation provider, we will update this policy and applicable consent and App Store disclosures before using that provider.
7. When and With Whom We Share Data
We share data only as needed to operate, secure and support the Game, comply with law, or complete a corporate transaction. Service providers may act as processors on our instructions or, for limited platform, authentication and advertising functions, as independent controllers under their own privacy terms.
Google Firebase — Privacy information
Services used: Anonymous authentication, Analytics, Crashlytics, Cloud Messaging, Remote Config, A/B Testing, Performance Monitoring, Installations and Realtime Database. Cloud Firestore is not used.
Purpose and current configuration: App operation, analytics, diagnostics, security, push delivery and feature configuration.
Google AdMob — Privacy information
Services used: Rewarded and interstitial advertising, ad delivery, frequency control, fraud prevention and aggregated reporting.
Purpose and current configuration: Non-personalized advertising only. No AdMob mediation networks are currently enabled.
Google Identity Services / Sign in with Google — Privacy information
Services used: Optional Google authentication, including a provider-specific user identifier, email address, email-verification status, authentication information and basic profile metadata made available through the configured permissions.
Purpose and current configuration: Authenticating players, linking a player profile, maintaining a session and restoring eligible account data. Google account information is not used for advertising or displayed to other players.
Supabase — Privacy information
Services used: Database, guest and social authentication, account linking, session management, storage, realtime features and edge functions, hosted in a Europe region selected by Arcustin.
Purpose and current configuration: Backend hosting and operation of guest and linked player profiles, authentication, progress, balances, leaderboard, account recovery and deletion workflows.
Apple — Privacy information
Services used: App Store, StoreKit, Sign in with Apple, iCloud Key-Value Store, Apple Push Notification service and related iOS platform services. Sign in with Apple may provide a provider-specific user identifier, an actual or private-relay email address, authorization information and, if requested and available, name information during initial authorization.
Purpose and current configuration: Distribution, purchases, optional authentication, account linking, restore functions, iCloud sync and notification delivery.
7.1 Other players
Other players may see your nickname, selected Arcustin-provided avatar, score and leaderboard ranking. They do not receive your Apple or Google account name, email address, provider identifier, authentication identifiers, IP address or purchase records from us.
7.2 Legal, safety and corporate disclosures
We may disclose relevant data to courts, regulators, law-enforcement authorities, advisers, auditors, insurers or other parties when reasonably necessary to comply with law, protect rights or safety, investigate fraud or security incidents, or establish, exercise or defend legal claims. If Arcustin is involved in a merger, acquisition, financing, reorganization or sale of all or part of its business, data may be disclosed under appropriate confidentiality and data-protection safeguards and transferred as permitted by law.
8. No Sale or Cross-Context Behavioral Advertising
Arcustin does not sell personal data for money or other valuable consideration. Under the current configuration of the Game, Arcustin does not share personal data for cross-context behavioral advertising or use personal data for targeted advertising based on activity across unrelated apps or websites. Google may process limited data to provide non-personalized advertising, frequency control, fraud prevention and aggregated reporting as described above.
9. International Data Transfers
The Game is available globally. Arcustin is established in Türkiye; the Supabase project is hosted in a selected Europe region; and Google, Apple, Supabase and their subprocessors may process data in countries where they or their service providers operate. Those countries may have data-protection laws different from the laws where you live.
Where applicable law requires transfer safeguards, we use or require appropriate lawful mechanisms, which may include adequacy decisions, standard contractual clauses, contractual commitments, security measures or another mechanism recognized by the relevant authority. For transfers subject to Turkish data-protection law, Arcustin will rely on a transfer method permitted by Article 9 of Law No. 6698, as applicable. You may contact us for more information about relevant safeguards.
10. Data Retention and Deletion
Unless deleted earlier, backend user, profile and gameplay data stored through Supabase is generally retained for no longer than three years. The applicable period is assessed according to the purpose of the record, the player’s last relevant activity, legal requirements and operational need.
You may initiate account deletion through Settings > Delete Account in the Game. After you confirm the request, the current account session is ended and the Game may create a separate new guest profile on the device. The initial confirmation means that the deletion request has been received; it does not mean that server-side deletion has already been completed.
Within 15 calendar days after receiving a confirmed deletion request, we will delete the player account and associated personal data from our active production systems. This includes, where associated with the deleted account, the Supabase authentication identity and provider connection, player profile, gameplay progress, nickname, avatar, leaderboard entry, scores, balances, inventory, unused Virtual Items, push token and other account-linked records that are no longer required.
For accounts linked through Sign in with Apple, the account-deletion process includes revoking the applicable Apple authorization tokens. For accounts linked through Sign in with Google, the process includes disconnecting or revoking the applicable Google authorization and deleting information obtained from Google that is associated with the account. We also delete or request deletion from processors where required and technically applicable.
We may retain only limited records where reasonably necessary to comply with tax, accounting, payment, fraud-prevention, security, regulatory, dispute or legal-claims obligations. Such records will be restricted and will not be used to continue operating the deleted player account. Information that has been irreversibly anonymized or aggregated so that it can no longer be linked to the player may also be retained.
Residual copies may remain temporarily in protected backups until the applicable backup cycle securely overwrites them. If a backup is restored during that period, the deletion instruction will be reapplied. Public leaderboard data and active production records will be removed within the 14-business-day period.
Deleting a player account does not delete the player’s Apple or Google account or information that those providers independently retain under their own legal obligations and privacy policies, such as App Store purchase history. Uninstalling the Game does not by itself submit an account-deletion request.
11. Security
We use reasonable technical and organizational measures designed to protect personal data, including access controls, encrypted network transport, provider security controls, logging and procedures for handling incidents and requests. No internet, mobile or storage system is completely secure, and we cannot guarantee absolute security. You should keep your device, Apple Account and operating system secure and avoid including personal information in your nickname.
12. Your Choices
Notifications: allow or disable notifications from the Game in iOS Settings.
Advertising privacy: use the in-app UMP privacy-options control where available and manage Apple's tracking setting in iOS. The Game currently does not use IDFA or personalized ads.
iCloud: turn the Game's iCloud access on or off in your Apple iCloud settings. Turning it off may affect sync or restoration of app state.
Nickname and avatar: change them through the Game where the feature is available, or report an inappropriate nickname using the in-game report function.
Account deletion: use Settings > Delete Account to initiate deletion from within the Game. If you cannot access the Game, you may contact info@arcustin.com.
Third-party sign-in: you may continue using the Game as a guest without linking an Apple or Google account. Revoking the Game’s authorization only through Apple or Google settings does not by itself submit an account-deletion request to Arcustin; use the in-game deletion function or contact us.
An in-app request submitted from an authenticated player session generally verifies control of the relevant account. For an email request, we may request limited information needed to locate the account and verify that the requester controls the relevant guest or linked player profile. Do not send us passwords, payment-card details or Apple or Google account credentials.
13. Your Privacy Rights
Depending on where you live and subject to legal conditions and exceptions, you may have rights to know whether we process personal data about you; access or receive a copy; correct inaccurate data; request deletion; restrict or object to processing; withdraw consent; receive portable data; and complain to a data-protection authority. You will not be discriminated against for exercising a privacy right. Withdrawing consent does not affect processing that was lawful before withdrawal.
13.1 Türkiye
Under Article 11 of Türkiye's Law No. 6698 on the Protection of Personal Data (KVKK), data subjects may ask whether personal data is processed; request information; learn the purpose and whether data is used accordingly; learn recipients in Türkiye or abroad; request correction of incomplete or inaccurate data; request deletion or destruction where the legal conditions apply; request notification of correction or deletion to recipients; object to a result arising exclusively from automated analysis that is against the person; and request compensation for damage caused by unlawful processing. Requests may be sent to the contact details in Section 1 using a method permitted by applicable law.
13.2 EEA, United Kingdom and Switzerland
Where the GDPR, UK GDPR or Swiss data-protection law applies, you may have rights of access, rectification, erasure, restriction, objection, portability and withdrawal of consent, and the right to complain to the supervisory authority where you live, work or where an alleged infringement occurred. You may object to processing based on legitimate interests; we will stop unless compelling legitimate grounds or legal claims justify continued processing. You may object at any time to direct marketing.
13.3 United States
Where an applicable U.S. state privacy law applies to Arcustin and to your request, you may have rights to know, access, correct, delete or obtain a portable copy of personal data; opt out of sale, targeted advertising or certain profiling; limit certain uses of sensitive personal information; and appeal a denied request. Arcustin does not currently sell personal data, share it for cross-context behavioral advertising, use it for targeted advertising, or intentionally collect sensitive personal information through the Game. Authorized agents may submit requests where permitted, subject to verification.
13.4 Other jurisdictions
Residents of Canada, Brazil, Australia and other jurisdictions may have additional local rights. Contact us and identify your country or region so we can evaluate and respond under the applicable law.
14. Children and Teen Players
The Game is a general-audience casual puzzle game and is not specifically directed to children under 13. The Terms of Use require players to be at least 13 and require parental or guardian approval for minors where applicable.
The optional Apple or Google sign-in process may provide an email address and limited basic account information as described in Section 2.2. We do not use that information as the player’s public profile or for advertising or marketing.
We apply privacy-protective defaults to all players: no personalized advertising, no IDFA or cross-app tracking, no requirement to display a real name, a limited set of Arcustin-provided avatars, and nickname filtering and reporting. If we learn that personal data was collected from a child in circumstances requiring parental authorization without that authorization, we will delete or otherwise address the data as required by law. A parent or guardian may use the in-game account-deletion function or contact info@arcustin.com.
15. Automated Processing
The Game may use rules, analytics, Remote Config and A/B Testing to assign game configurations, balance content, detect suspected cheating or fraud, and determine which in-game offer or event to display. We do not currently use personal data to make decisions that produce legal or similarly significant effects solely by automated means.
16. Changes to This Privacy Policy
We may update this Privacy Policy when the Game, our providers or applicable law changes. We will post the updated version and revise the "Last updated" date. If a change materially affects your privacy rights or introduces a new use requiring consent, we will provide additional notice or request consent as required before that processing begins.
17. Contact Us
For privacy questions, requests or complaints, contact:
Arcustin Yapay Zeka Teknolojileri Anonim Şirketi
Ayazağa Mahallesi, Kemerburgaz Caddesi, Vadi İstanbul Park Sitesi, 7A Blok No: 7B, İç Kapı No: 4, 34396 Sarıyer/İstanbul, Türkiye
Email: info@arcustin.com